From: Tom Hughes <tom@compton.nu>
Date: Mon, 27 May 2024 09:44:26 +0000 (+0100)
Subject: Merge remote-tracking branch 'upstream/pull/4836'
X-Git-Tag: live~755
X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/94afd0df1c754aee43e4460ccafd984eb07ee069?hp=9d4cf2bccc2b8b146cab166a036bf5cae74bacce

Merge remote-tracking branch 'upstream/pull/4836'
---

diff --git a/app/assets/javascripts/index/browse.js b/app/assets/javascripts/index/browse.js
index 69d625eca..7a761b500 100644
--- a/app/assets/javascripts/index/browse.js
+++ b/app/assets/javascripts/index/browse.js
@@ -58,7 +58,7 @@ OSM.initializeBrowse = function (map) {
               .click(cancel))),
         $("<p class='alert alert-warning'>")
           .text(I18n.t("browse.start_rjs.feature_warning", { num_features: count, max_features: limit })),
-        $("<input type='submit' class='btn btn-primary'>")
+        $("<input type='submit' class='btn btn-primary d-block mx-auto'>")
           .val(I18n.t("browse.start_rjs.load_data"))
           .click(add)));
   }
diff --git a/app/assets/stylesheets/common.scss b/app/assets/stylesheets/common.scss
index 381967f6a..abff59a20 100644
--- a/app/assets/stylesheets/common.scss
+++ b/app/assets/stylesheets/common.scss
@@ -489,16 +489,6 @@ body.small-nav {
 
 .donate-attr { color: darken($green, 10%) !important; }
 
-/* Rules for the sidebar */
-
-#browse_status {
-  input {
-    display: block;
-    margin-left: auto;
-    margin-right: auto;
-  }
-}
-
 /* Temporary label size override until we remove site-wide font customisation */
 
 form {
diff --git a/app/controllers/site_controller.rb b/app/controllers/site_controller.rb
index 172be5653..8b742a585 100644
--- a/app/controllers/site_controller.rb
+++ b/app/controllers/site_controller.rb
@@ -18,8 +18,7 @@ class SiteController < ApplicationController
 
   content_security_policy(:only => :id) do |policy|
     policy.connect_src("*")
-    policy.img_src("*", :blob)
-    policy.script_src(*policy.script_src, "dev.virtualearth.net", :unsafe_eval)
+    policy.img_src(*policy.img_src, "*", :blob)
     policy.style_src(*policy.style_src, :unsafe_inline)
   end